Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
File: fsXyOE4h9kNhkTORzhqSs3LoD68.mft (raw, json)
Hash identifier: a/p4Q2yBv7RDRMbgdoCg8oGjTVhLwY4NLXn/AZPSxmM=
Subject key identifier: 0D:21:20:BC:2E:DA:42:9B:02:6E:C1:8B:FD:5F:10:18:A9:0D:69:82
Authority key identifier: 7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
Certificate issuer: /CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Certificate serial: 01A0F2D5BC6735546BF1C6D2B611FAFC423C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 15:01:28 +0000
Manifest this update: Wed 30 Sep 2026 15:01:28 +0000
Manifest next update: Thu 01 Oct 2026 15:01:28 +0000
Files and hashes: 1: LPa8zPLpV8cXLL0nCvftZJmqBOc.roa (hash: LXKc34IWPeXHGhj7ZOiZu7C5VwcYcKy1yZjCEZ9N19Q=)
2: fsXyOE4h9kNhkTORzhqSs3LoD68.crl (hash: DFuBzpo8FAHb8/jOTlEnTdIG1IC48VFITntCPqgIDdY=)
3: pQG7xs47QDWXz1fB29umQErevhE.roa (hash: YQn0GgeL+9mDh4EZTTSLpL9PtFZrlsb8YoTmjdlwtnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d5:bc:67:35:54:6b:f1:c6:d2:b6:11:fa:fc:42:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Validity
Not Before: Sep 30 15:01:28 2026 GMT
Not After : Oct 1 15:01:28 2026 GMT
Subject: CN=0d2120bc2eda429b026ec18bfd5f1018a90d6982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:e3:46:37:9c:3b:27:84:d1:ab:9b:f6:49:
18:54:48:f8:06:a7:a1:67:b0:df:f3:5c:f1:8b:be:
f4:a4:ac:13:74:44:a7:23:6c:5f:23:af:18:d5:cd:
a4:02:8f:0d:1c:e2:fd:68:04:d6:b1:0e:38:9c:07:
ff:23:49:61:18:c8:3e:5f:ff:5f:2f:a4:36:be:b6:
17:98:ea:1a:c0:02:44:fb:e4:f2:c3:b0:ea:9f:76:
c9:5d:62:c7:07:0c:14:85:e3:a6:9f:1e:96:61:37:
14:96:d0:9d:91:ce:c2:88:ea:ca:3d:7d:65:a7:d4:
8b:58:c4:a1:23:30:f9:59:ae:6d:1c:53:6b:d9:a4:
99:7e:40:ef:93:e5:71:86:9a:57:ca:c5:76:0f:84:
fb:89:23:a5:b0:0c:af:a9:43:ce:2b:9b:de:99:43:
0f:99:66:6e:b7:a7:6e:6d:5f:d2:72:4d:1d:3f:34:
eb:8b:fe:66:d6:3b:b9:5e:c0:d1:80:e9:c5:bb:d9:
84:38:92:59:aa:c1:f0:1b:c4:c9:b0:8f:5b:45:3c:
3c:71:46:43:51:a0:dc:23:c0:c8:b0:b3:38:e6:a5:
56:a4:f7:04:fd:ed:78:0f:e3:71:b0:bf:93:68:37:
85:7f:a8:b6:af:4e:26:e4:f9:97:68:e9:e7:7b:53:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:20:BC:2E:DA:42:9B:02:6E:C1:8B:FD:5F:10:18:A9:0D:69:82
X509v3 Authority Key Identifier:
keyid:7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:db:89:3a:6b:c2:72:97:57:c3:ae:58:55:8c:52:15:e8:84:
b9:af:14:8a:c6:3d:98:f1:75:e0:a9:ee:77:65:37:16:ab:22:
a4:f2:aa:4d:32:b1:9f:d2:8a:2d:ba:34:67:29:1d:dc:2e:ce:
4a:07:7e:77:db:e8:8d:44:cd:fa:22:2a:75:11:18:df:98:67:
06:43:a4:5c:6e:72:5c:19:67:0b:e5:a3:00:fe:e4:e0:d5:96:
07:bc:f2:b3:3d:67:59:81:01:bb:b5:d5:0c:b3:fd:89:99:7f:
71:fa:e0:df:00:5f:d3:28:8c:e8:a2:ce:96:7f:7a:78:db:48:
9a:9d:0f:ab:f6:c2:f8:5d:42:e3:d2:ab:d1:af:17:78:10:e1:
e4:e5:c6:f2:45:b4:15:d6:ad:e7:52:ab:86:d1:e9:0f:21:55:
76:15:eb:04:53:fd:ce:18:65:d2:56:35:31:4a:c0:54:f8:76:
55:0c:69:95:c4:ce:55:b9:ab:15:70:54:33:63:e0:ac:7c:d3:
fe:2e:3d:d4:28:95:6b:16:98:75:c0:b0:38:16:ce:ae:59:ba:
af:79:b1:0a:67:a7:47:bd:87:14:33:4a:1c:46:dc:c1:de:ae:
9c:09:b4:96:a6:ba:22:eb:8c:8b:89:0d:15:42:31:52:84:cb:
fa:eb:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:55:44 2026 by rpki-client